Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230352e302f32342d3234203d3e203634323937.roa
File:                     3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (raw, json)
Hash identifier:          rOrvsqapVd8XY6XV3A85SJQQbPjzrR7RezQToePFDJc=
Subject key identifier:   13:B6:7C:5F:9C:CF:25:E5:17:39:7A:C0:1F:9B:B4:EE:3E:75:CF:C8
Certificate issuer:       /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial:       53BA9CD983BFD7B33DE3E838DB610D89680B40F1
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230352e302f32342d3234203d3e203634323937.roa
Signing time:             Sat 06 Apr 2024 04:00:00 +0000
ROA not before:           Sat 06 Apr 2024 03:55:00 +0000
ROA not after:            Sat 05 Apr 2025 04:00:00 +0000
asID:                     64297
IP address blocks:        103.77.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
                          rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ba:9c:d9:83:bf:d7:b3:3d:e3:e8:38:db:61:0d:89:68:0b:40:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
        Validity
            Not Before: Apr  6 03:55:00 2024 GMT
            Not After : Apr  5 04:00:00 2025 GMT
        Subject: CN=13B67C5F9CCF25E517397AC01F9BB4EE3E75CFC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:6e:b9:8c:57:98:69:cb:8d:15:1d:0f:62:
                    58:2d:fc:a8:9f:f4:49:5e:d9:c7:b1:7a:13:37:e5:
                    b1:c9:ce:de:a2:b6:94:92:03:69:a2:53:bd:ae:e5:
                    48:b9:ef:d8:39:93:45:47:85:8c:c2:7a:9f:e5:ba:
                    9b:52:9d:78:e6:ff:11:db:a3:4a:53:eb:e0:b1:50:
                    d9:0b:c3:ec:db:b2:b6:3d:db:54:53:9b:d0:91:0e:
                    13:dc:2d:5c:0a:d3:5d:96:e5:3c:8c:9a:c1:bc:e0:
                    88:29:ad:1f:75:c8:07:63:97:4a:e4:9e:06:75:45:
                    38:ea:4a:e6:3e:df:74:49:e4:23:d5:4c:cb:19:47:
                    95:70:f7:11:2c:f1:93:41:e1:c2:bf:1a:17:40:75:
                    14:d0:56:2f:93:ff:1f:20:57:82:72:27:0a:0b:d8:
                    85:92:25:c5:fd:85:d9:0e:80:4f:94:0d:94:d0:c9:
                    2e:e7:a3:3a:c9:97:34:cd:98:5c:7f:ab:0f:e4:f4:
                    17:d0:0b:aa:96:2c:71:c7:41:a4:9e:27:d7:3f:13:
                    f6:e2:fd:b5:ee:b3:89:d8:1e:b8:54:1d:5c:77:27:
                    4d:eb:48:38:a3:19:45:2f:25:67:3f:f0:d4:d4:45:
                    11:ad:fe:d7:0f:0d:09:17:d8:8f:73:f0:90:bc:5a:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B6:7C:5F:9C:CF:25:E5:17:39:7A:C0:1F:9B:B4:EE:3E:75:CF:C8
            X509v3 Authority Key Identifier:
                keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230352e302f32342d3234203d3e203634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:7e:88:39:63:56:27:fa:51:9e:cd:d5:6f:3a:91:25:ac:7d:
         ef:6b:30:bb:c8:e3:75:51:34:83:85:2f:3a:91:8b:b3:42:59:
         bd:30:4d:c3:3f:c0:3e:e0:5f:d5:17:da:2a:78:66:7d:63:09:
         10:11:a4:e1:54:22:8b:b2:76:61:0e:a8:6d:4f:06:32:5e:19:
         e2:44:9f:8b:d9:34:87:84:12:92:3a:7e:d2:31:3d:4f:7d:44:
         6a:7d:d1:65:21:82:6a:6f:70:86:d3:43:48:1c:e0:ae:89:df:
         a2:4c:5c:9f:dc:e6:8d:0d:e3:8c:6e:d9:1a:3f:7e:c9:86:a1:
         58:bb:ac:ca:11:6f:60:ef:09:c3:50:4a:94:83:c2:78:4f:56:
         ec:0a:11:6f:61:b3:e0:cd:a7:0c:ec:9f:2a:8e:59:97:d5:5f:
         ce:af:20:8d:db:5f:0e:b5:6a:87:bf:f4:e4:d5:2f:c8:94:d2:
         dc:03:bb:d6:63:58:3a:f0:c7:5d:f0:c9:bc:80:4b:90:b4:7f:
         16:80:4f:80:c7:df:2f:1b:a2:0f:10:ec:14:43:83:4b:00:d6:
         a7:5f:1f:bb:90:4e:6d:33:0f:70:5b:3b:b7:14:65:a1:e3:19:
         6f:ab:ef:d8:28:72:25:e7:47:f6:b9:b3:cc:26:40:c0:52:3a:
         4d:a1:f4:6a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUU7qc2YO/17M94+g422ENiWgLQPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2
MTBBRUM0OTAeFw0yNDA0MDYwMzU1MDBaFw0yNTA0MDUwNDAwMDBaMDMxMTAvBgNV
BAMTKDEzQjY3QzVGOUNDRjI1RTUxNzM5N0FDMDFGOUJCNEVFM0U3NUNGQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNIG65jFeYacuNFR0PYlgt/Kif
9Ele2cexehM35bHJzt6itpSSA2miU72u5Ui579g5k0VHhYzCep/luptSnXjm/xHb
o0pT6+CxUNkLw+zbsrY921RTm9CRDhPcLVwK012W5TyMmsG84IgprR91yAdjl0rk
ngZ1RTjqSuY+33RJ5CPVTMsZR5Vw9xEs8ZNB4cK/GhdAdRTQVi+T/x8gV4JyJwoL
2IWSJcX9hdkOgE+UDZTQyS7nozrJlzTNmFx/qw/k9BfQC6qWLHHHQaSeJ9c/E/bi
/bXus4nYHrhUHVx3J03rSDijGUUvJWc/8NTURRGt/tcPDQkX2I9z8JC8Wm/lAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUE7Z8X5zPJeUXOXrAH5u07j51z8gwHwYDVR0j
BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx
M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB
RUM0OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ5ZGE3YjZhLTRlMWEtNDFmZi1i
OGViLThjMzY0Y2QyNjRiMS8wLzMxMzAzMzJlMzczNzJlMzIzMDM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzNDMyMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdNzTANBgkqhkiG
9w0BAQsFAAOCAQEAhX6IOWNWJ/pRns3VbzqRJax972swu8jjdVE0g4UvOpGLs0JZ
vTBNwz/APuBf1RfaKnhmfWMJEBGk4VQii7J2YQ6obU8GMl4Z4kSfi9k0h4QSkjp+
0jE9T31Ean3RZSGCam9whtNDSBzgronfokxcn9zmjQ3jjG7ZGj9+yYahWLusyhFv
YO8Jw1BKlIPCeE9W7AoRb2Gz4M2nDOyfKo5Zl9Vfzq8gjdtfDrVqh7/05NUvyJTS
3AO71mNYOvDHXfDJvIBLkLR/FoBPgMffLxuiDxDsFEODSwDWp18fu5BObTMPcFs7
txRloeMZb6vv2ChyJedH9rmzzCZAwFI6TaH0ag==
-----END CERTIFICATE-----
Generated at Sun Nov 24 11:23:25 2024 by rpki-client on console-ams.rpki-client.org